Moodle Cross-Site Scripting Vulnerability

Moodle is an open source web-based teaching and learning application. A cross-site scripting vulnerability exists in the Moodle pending approval page, which allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack...